The openssl binaries libcrypto.so and libssl.so contain contain absolute paths for OPENSSLDIR (which contains the config and certificates, etc.) Hence they are not relocatable via sstate. While a wrapper script could be created (using utils.bbclass create_wrapper) for usr/bin/openssl, this wrapper would not solve the problem if an application is linked against libcrypto.so or libssl.so directly.
Created attachment 2180 [details] preliminary patch
Thanks to Andre, the report for this patch: http://git.yoctoproject.org/cgit/cgit.cgi/poky/commit/?id=5e2bf794c712eff012e39dab54fe3861ebc1185d